FiboSearch – Ajax Search for WooCommerce vulnerabilities

Product

FiboSearch – Ajax Search for WooCommerce

by damian-gora · last CVE Oct 16, 2026

CVEs

On KEV

6.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 4Low 0

Severity

Exploitation

Watch

Add FiboSearch – Ajax Search for WooCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-100106	6.4	0%	Oct 16	FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'purchased_plan' Parameter Affected: through 1.34.2
CVE-2022-4974	6.3	0%	Oct 16	Freemius SDK <= 2.4.2 - Missing Authorization Checks Affected: before 1.17.0
CVE-2025-14298	5.4	0%	Dec 20	FiboSearch – Ajax Search for WooCommerce <= 1.32.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via thegem_te_search Shortcode Affected: through 1.32.0
CVE-2023-2450	4.4	1%	Jun 9	The FiboSearch - AJAX Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.23.0 due to… Affected: 1.23.0